tl-wr841n_firmware Archives - CVE Vulnerability

CVE-2018-12574

Sun, 26 Feb 2023 06:45:42 +0000

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices.

The post CVE-2018-12574 appeared first on CVE Vulnerability.

CVE-2018-12575

Sun, 26 Feb 2023 06:45:42 +0000

On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request.

The post CVE-2018-12575 appeared first on CVE Vulnerability.

CVE-2018-12576

Sun, 26 Feb 2023 06:45:42 +0000

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking.

The post CVE-2018-12576 appeared first on CVE Vulnerability.

CVE-2018-12577

Sun, 26 Feb 2023 06:45:42 +0000

The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection.

The post CVE-2018-12577 appeared first on CVE Vulnerability.

CVE-2020-8423

Sun, 26 Feb 2023 06:43:24 +0000

A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the configuration of the Wi-Fi network.

The post CVE-2020-8423 appeared first on CVE Vulnerability.

CVE-2020-35576

Sun, 26 Feb 2023 06:41:20 +0000

A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577.

The post CVE-2020-35576 appeared first on CVE Vulnerability.

CVE-2019-17147

Sun, 26 Feb 2023 06:31:28 +0000

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 80 by default. When parsing the Host request header, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length static buffer. An attacker can leverage this vulnerability to execute code in the context of the admin user. Was ZDI-CAN-8457.

The post CVE-2019-17147 appeared first on CVE Vulnerability.

CVE-2022-46912

godfreyd94 — Thu, 23 Feb 2023 05:21:40 +0000

An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.

The post CVE-2022-46912 appeared first on CVE Vulnerability.

CVE-2022-42202

godfreyd94 — Thu, 23 Feb 2023 05:20:57 +0000

TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS).

The post CVE-2022-42202 appeared first on CVE Vulnerability.

CVE-2022-30024

godfreyd94 — Thu, 23 Feb 2023 05:18:34 +0000

A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.

The post CVE-2022-30024 appeared first on CVE Vulnerability.